Incident Center > Security

Win32/Cryptor virus infection blocking IE

Customer Tech Support Issues

Computer is infected with multiple viruses and rootkits.  sdra64.exe identified as worm/trojan threat and is threaded into userinit.exe running from system32 folder.  sysloc.dll browser helper object (BHO) and proxy override identified and fixed.  Multiple rootkit entries identified and removed.  Restored a Windows system32 proquota file from the i386 folder.

In the Words of our Customer

In my absence for a week, my 27 year old son had been on adult sites and Facebook. We picked up a large number of viruses and Trojans. Some we were able to cleanse with our antivirus, but 14 Win32/Cryptors couldn't be budged. The viruses blocked downloading help and disabled Internet Explorer. My machine was a mess! In about an hour with Support.com I regained control of my computer and the aggravation of having Hal on my desk running out of control.

Martin, Vermont